Impersonate and wildcard for users

Security
1

Hi all,

I am trying to set impersonation, to allow my user “kibanaserver” to impersonate any user.

To do it, i added this rule in my elasticsearch.yml :
Capture1
But it doesn’t work, unless i put a letter before *

Documentation says that :
The impersonated user field supports wildcards. Setting it to * allows AUTHENTICATED_USER to impersonate any user.
https://opendistro.github.io/for-elasticsearch-docs/docs/security-access-control/impersonation/

But no example.

Do you have any idea ?

Thanks
Julien

2

I guess you are getting yaml parser exception. Try this:

opendistro_security.authcz.rest_impersonation_user.kibanaserver: ["*"]
3

@Julien Did the above solution fix your issue? If not, what version of odfe are you using?